Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Sophos · United Kingdom

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

Sophos · United Kingdom

Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

CrowdStrike · United Kingdom

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

CrowdStrike · Jacksonville, United States · £72,000 – £130,000 pa

Technical analyst role in a virtual security operations centre, monitoring and investigating security alerts in real time. Involves incident handling across Windows, Mac and Linux, malware analysis, remote remediation, and serving as escalation point and mentor for junior analysts while producing customer-facing findings.

Palo Alto Networks · London

Technical pre-sales role covering the UK&I region, driving the technology evaluation stage of the sales cycle for the Idira Identity Security Platform. You will run solution demonstrations, architecture reviews and customer proof-of-concepts, designing Zero-Trust access approaches for human and non-human identities across cloud and datacenter environments, and mentoring other solutions engineers.

Palo Alto Networks · London

Deliver expert-level technical support to top-tier cybersecurity customers, owning complex cases from initiation to resolution through multi-vendor troubleshooting, fault isolation and root cause analysis. Act as a designated customer advocate running weekly reviews, QBRs and upgrade planning, while working with Engineering and QA on bug reports and test plans.

ECS Resource Group · Newbury · £450 – £500 pd

Security architecture and independent assurance role on a large-scale telecoms programme, focused on Privileged Access Management and securing administrative access to critical Network Management Systems. You will review network and security designs, assure HLDs, LLDs, PoCs and test strategies, and advise on segmentation, least privilege and secure management access. Requires strong IP networking (MPLS, VPNs, VRFs) plus AAA, TACACS+, MFA and RBAC expertise.

Creideas · Thame · £600 – £850 pd

Part-time consultant guiding a client's migration from traditional data centres to AWS, acting as an escalation point and mentor for a small team of engineers. Works closely with the CISO on security reviews and strategy, applying SIEM, EDR and vulnerability management skills. Mostly remote with occasional in-person catch-ups.

Circle Recruitment · Reading · £70,000 – £100,000 pa

Deliver practical cyber security advice to clients across complex IT and OT environments, managing engagements and building trusted relationships with senior stakeholders. Assess information security risks, review controls and apply frameworks such as ISO 27001, NIST CSF and NCSC CAF, while progressively taking responsibility for OT security engagements.

Experis · United Kingdom · £70,000 – £90,000 pa

Lead OT cyber risk assessments on client sites, which makes up around 80% of the role, and carry out site surveys across ICS, SCADA, DCS and wider OT environments. Build improvement roadmaps and security programmes, applying standards such as IEC 62443, NCSC CAF, NIST SP 800-82 and HSE OG86, while supporting the sales team on follow-on opportunities and proposals.

Ex-Mil Recruitment Ltd · Southampton · £75,000 – £85,000 pa

Principal-level technical security lead on a high-assurance UK defence programme moving from MVP towards operational capability. The role covers secure-by-design architecture, cross-domain information exchange, cyber risk and assurance, IAM, cryptography, cloud and network security, working with solution architects, DevOps and assurance teams. Distinct for its defence focus and ex-military requirement.

Tank Recruitment · United Kingdom · £80,000 – £90,000 pa

Designs and reviews security architectures across cyber, cloud and enterprise environments for defence customers, acting as a trusted technical adviser. Develops secure AWS or Azure cloud architectures, produces assurance documentation and designs, and travels to customer sites to engage stakeholders. Requires live SC clearance and CISSP, with a genuine voice in shaping the consultancy's security offering.